Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2013-1415
HistoryMar 05, 2013 - 12:00 a.m.

CVE-2013-1415

2013-03-0500:00:00
ubuntu.com
ubuntu.com
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.065 Low

EPSS

Percentile

93.7%

JSON

The pkinit_check_kdc_pkid function in
plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation
in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before
1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during
extraction of fields from an X.509 certificate, which allows remote
attackers to cause a denial of service (NULL pointer dereference and daemon
crash) via a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchkrb5< 1.8.1+dfsg-2ubuntu0.13UNKNOWN
ubuntu12.04noarchkrb5< 1.10+dfsg~beta1-2ubuntu0.5UNKNOWN

Related

securityvulns 3
cve 1
nessus 13
freebsd 1
debiancve 1
openvas 19
checkpoint_advisories 1
prion 1
altlinux 3
veracode 1
fedora 6
redhat 1
oraclelinux 1
centos 1
ubuntu 1
securityvulns
securityvulns
MIT Kerberos 5 DoS
2013-04-09 00:00:00
[ MDVSA-2013:157 ] krb5
2013-05-04 00:00:00
MIT Kerberos 5 security vulnereabilities
2013-05-04 00:00:00
cve
cve
CVE-2013-1415
2013-03-05 05:05:00
nessus
nessus
FreeBSD : krb5 -- NULL pointer dereference in the KDC PKINIT code [CVE-2013-1415] (f54584bc-7d2b-11e2-9bd1-206a8a720317)
2013-02-24 00:00:00
SuSE 11.2 Security Update : Kerberos 5 (SAT Patch Number 7446)
2013-03-28 00:00:00
openSUSE Security Update : krb5 (openSUSE-SU-2013:0498-1)
2014-06-13 00:00:00
freebsd
freebsd
krb5 -- null pointer dereference in the KDC PKINIT code [CVE-2013-1415]
2013-02-21 00:00:00
debiancve
debiancve
CVE-2013-1415
2013-03-05 05:05:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:0558-1)
2021-06-09 00:00:00
Fedora Update for krb5 FEDORA-2013-3147
2013-03-25 00:00:00
Oracle: Security Advisory (ELSA-2013-0656)
2015-10-06 00:00:00
checkpoint_advisories
checkpoint_advisories
MIT Kerberos 5 KDC pkinit_check_kdc_pkid NULL Pointer Dereference (CVE-2013-1415)
2013-03-27 00:00:00
prion
prion
Null pointer dereference
2013-03-05 05:05:00
altlinux
altlinux
Security fix for the ALT Linux 7 package krb5 version 1.11.1-alt1
2013-03-30 00:00:00
Security fix for the ALT Linux 8 package krb5 version 1.11.1-alt1
2013-03-30 00:00:00
Security fix for the ALT Linux 9 package krb5 version 1.11.1-alt1
2013-03-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:54:30
fedora
fedora
[SECURITY] Fedora 18 Update: krb5-1.10.3-14.fc18
2013-03-22 21:08:31
[SECURITY] Fedora 18 Update: krb5-1.10.3-15.fc18
2013-04-18 02:43:29
[SECURITY] Fedora 18 Update: krb5-1.10.3-17.fc18
2013-05-21 08:38:01
redhat
redhat
(RHSA-2013:0656) Moderate: krb5 security update
2013-03-18 00:00:00
oraclelinux
oraclelinux
krb5 security update
2013-03-18 00:00:00
centos
centos
krb5 security update
2013-03-18 20:32:47
ubuntu
ubuntu
Kerberos vulnerabilities
2014-08-11 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.065 Low

EPSS

Percentile

93.7%

JSON
Related for UB:CVE-2013-1415
securityvulns3cve1nessus13freebsd1debiancve1openvas19checkpoint_advisories1prion1altlinux3veracode1fedora6redhat1oraclelinux1centos1ubuntu1